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IN THE CLAIMS : 

Please find below a listing of all pending claims. The statuses of the claims are 
set forth in parentheses. For those currently amended claims, underlined emphasis 
indicates insertions and str i kothrough emphasis (and/or double brackets) indicates 
deletions. 

1. (Currently Amended) An unauthorized access prevention system which resides 
within a user's communication networ k, i nc l ud i ng the unauthorized access prevention 
system comprising : 

a traffic recording unit for recording information on traffic that flows into the 
user's communication network and arrives in a customer site; 

a search unit for searching, from the information recorded in the traffic recording 
unit, the flowing-in path of unauthorized access, which is transmitted from a transmitter 
and is included in the traffic, to services disclosed from the customer site to other 
communication networks adjacent to the user's communication network via the user's 
communication network; 

a determination unit for ^determining a plurality of c ountermeasure 

implementation planning plae eplaoes from among a plurality of places, which include 
the Qther CQmmgnicgtiQn networks, edge routers of the user's communication network 
each of which is arranged on each border of the other communication networks, and 
POP (point of presence! edge routers within the user's communication network, the 
plurality of places being f or protecting the services from the unauthorized access based 
on a result of the search; and 

a notification unit fQLnotifying at least one or more notified parties, which 
include other unauthorized access prevention svstems each of which resides within the 
other communication networks, the edge routers of the user's communication network, 
and the POP edoe routers within the user's communication network, onlv q flow sourco 
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thot i s one of the other communicat i on networks of the determination of the 
countermeasure implementation planning pteee^iaees, when the determination unit 
determines the notified parties f lo w s ource as tiie countermeasure implementation 
planning ptaee places for a reason that the unauthorized access was flowed Into the 
user's communication network. network, wherein: 

thQ nptiflcgtipn unit nptifigg thg othgr gnggthorized access prevention systems of 
the determination when the determination unit determines the other communication 
networks as the countermeasure implementation plannino places, and 

the notification unit notifies the edge routers or the POP edge routers of the 
CigtgrmingtiQ n when the othgr commgniggtipn networks do not have a reliable 
relationship with the users' communication network even if the determination unit 
determines the other communication networks as the countermeasure Implementation 
Planning places. 

2. (Currently Amended) A recording medium In which a program that directs a 
computer residing within a user's communication network to implement a 
countermeasure against unauthorized access is recorded and in which the program can 
be read by the computer, and the program directs the computer to perform the 
following processes by being executed by the computer: 

a detection process of detecting an unauthorized access transmitted from a 
transmitter to services disclosed from a customer site to other communication networks 
adjacent to the user's communication network via the user's communication network; 
and 

when the detection of the unauthorized access Is notified, performs the following 
processes: 

a search process of searching the flowlng-in path of tiie unauthorized access to 
the services disclosed from the customer site; 
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a determination process of determining a plurality of countermeasure 
implementation planning ptaee -places from among a plurality of places, w hich include 
the other communication networks, edoe routers of the user's communication network 
each of which is arranged on each border of the other communication networks, and 
POP (point of presence! edge routers within the user's comm unication network, the 
plurality of places being f or protecting the services from the unauthorized access based 
on a result of the search; and 

a notification process of notifying at least one or more notified parties, which 
include other unauthorized access prevention systems each of which resides within the 
other communication networks, the edoe routers of the user's communication network, 
and the POP edge routers within the user's communication network, only o flow sourc e 
that i s on e o f t he other commun i cat i on nctwor l co of the determination of the 
countermeasure implementation planning p l ace places , when it is determined that t he 
dotorminat i on — un i t dQtcrmincg the notified parties are flow source qg the 
countermeasure implementation planning plaeeelaces for a reason that the 
unauthorized access was flowed into the user's communication network. network, 
wherein: 

the notification process notifies the other unauthorized access prevention 
systems of the determination when it is determined that the other communication 
networks are the countermeasure implementation planning places, and 

the notification process notifies the edoe routers or the POP edoe routers of the 
determination when the other communication networks do no t have a reliable 
relationship with the users' communication network even if it is determined that the 
other communication networks are the countermeasure implementation planning places. 

3-4. (Cancelled) 
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5. (Previously presented) The recording medium according to claim 2, wherein the 
process of searching the flowing-in path Is performed by the computer based on the 
monitoring information on the traffic transmitted by the user's communication network 
and the unauthorized access infbnnation Indicating the contents of the unauthorized 
access. 

6. (Currently Amended) The recording medium according to claim 5, wherein the 
monitoring information includes at least the position Information on afl-the_edge 
routG r routers arranged on the border between the user's communicat i on network ond 
the communication n etwork adjacent to the user's commun i cotion n etwo rk and the 
monitoring information on the traffic that flows Into the user's communication network 
via one of t he edge feote frouters . 

7. (Currently Amended) The recording medium according to claim 2, wherein the 
notification process makes the computer execute a process of notif/ing the 
determination to the other communication networks f l ow source after mutual 
attestation Is conducted with th e other communication networks when it Is determined 
that the other communication networks are determined as the countermeasure 
implementation planning places flow source of the unauthor i zed acccGS . 

8. (Currently Amended) The recording medium according to claim 2, wherein when 
the other communication networi<s are determined as the countermeasure 
Implementation planning places, t he process of notifying the determination to the other 
communication networks Is performed by the comouter f l ow source a fter information on 
a security policy for the operation of each network is exchanged with the other 
communication networks. flow source that transm i ts the unouthorized occcss is 
performed by the computer. 
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9. (Previously presented) The recording medium according to claim 8, wherein 
Information on a security policy Is the information indicating the time required until the 
countermeasure against the unauthorized access Is cancelled after the unauthorized 
access is not detected any more. 

10. (Currently amended) The recording medium according to claim 9, wherein when 
the time indicated by the information on the security policy differs between the user's 
communication network and the other communication networks flow source , a shorter 
time of the two is used as the time required until the countermeasure against 
unauthorized access is cancelled after the unauthorized access Is not detected any more. 

11. (Currently amended) The recording medium acconJing to claim 10, wherein the 
process of notifying the other communication networks f low source of the 
determination and the information indicating the time required until the 
countermeasure against the unauthorized access is cancelled after the unauthorized 
access is not detected any more is performed by the computer. 

12. (Currently amended) The recording medium according to claim 2, wherein the 
process of notifying the other communication networks f l ow source of the unouthorizcd 
acce s s of the determination using the communication path that differs from the flowing- 
in path of the unauthorized access is performed by the computer. 

13. (Currently amended) A recording medium in which a program that directs a 
computer residing within a user's communication network to implement a 
countermeasure against unauthorized access is recorded and in which the program can 
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be read by the computer, and the program directs the computer to perform the 
following processes by being executed by the computer: 

a detection process of detecting an unauthorized access transmitted from a 
transmitter to services disclosed from a customer site to other communication networks 
adjacent to the user's communication network via the user's communication network; 
and 

when the detection of the unauthorized access is notified, performs the following 
processes: 

a search process of searching the flowing-in path of the unauthorized access to 
the services disclosed from the customer site; 

a determination process of determining a plurality of countermeasure 
implementation planning ptae eplaces from among a Diurality of places, which include 
the other communication networks, edge routers of the user's communication network 
each of which is arranged on each border of the other communication networks, and 
POP (point of presence^ edae routers within the user's communication network, the 
plurality of places being for protecting the services from the unauthorized access based 
on a result of the search; and 

a notification process for judging whether □ flow source, which is one of the 
other communication networks^-te are notified of the determination, when it is 
determined that the other communication networks are f l ow sourco is t he 
countermeasure implementation planning pteee places for a reason that the 
unauthorized access was flowed into the user's communication network, 
whcroin w herein: 

the notification process notifies other unauthorized access prevention systems 
each of which resides within the other communication networks o n l y the flow sourco of 
the determination of the countermeasure implementation planning ptae eplaces . when it 
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is judged that the other communication networks are f low sourcQ i s notified of the 
determination,-afld 

the notification process notifies the edge routers or the POP edge routers of the 
determination that the other communication networks do not have a reliable 
relationship with the users' communication network even if it is iudaed that the other 
communication networks are notified of the detemii nation. and 

by having the program executed by the computer; 

an unauthorized access countenneasure implementation control process that has 
the countermeasure for protecting the services from the unauthorized access 
implemented in the user's communication networks f l ow source when it is judged that 
the determination will not be notified to the other communication networks f l ow source 
based on the above notification process is further performed by the computer. 

14. (Currently amended) The recording medium according to claim 13, wherein the 
judgement is made based on judgement information on the other communication 
networks f low source t hat is given in advance. 

15. (Currently amended) The recording medium according to claim 2, wherein by 
having the program executed by th e computer; computer, t he unauthorized access 
countermeasure implementation control process that has the countermeasure for 
protecting the services from the unauthorized access implemented at the edge routers 
or the POP edoe routers in the user's commun i cation nctworlc based on the 
determination that said of the countermeasure implementation olannino places — Is 
i mp l cmcntGd in the user's communicat i on network is performed by the computer. 

16. (Cancelled) 
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17. (Currently amended) The recording medium according to daim-i6J^ wherein 
the process of identifying one of the POP edge routers to which the transmitter is 
connected based on the information obtained from the operation management system 
that manages the operation of the user's communication networl< is further performed 
by the compute r, when it is determined that the POP edoe routers are the 
countermeasure implementation planning places . 

18. (Currently amended) The recording medium according to claim 15, wherein by 
having the program executed by th e computcr -r computer: 

the process of obtaining a notification of the determination that unauthorized 
access to the services disclosed from a service-disclosed communication network 
different from the user's communication network is made to flow Into the service- 
disclosed s aid othor communication network is further performed by the computer; and 

the process of implementing the countermeasure for protecting the services 
disclosed from said service-disclosed e thet^-communicatlon network from the 
unauthorized access related to the notification at the edge routers or the POP edge 
routers in the user's communlcot l on network w hen the notification Is obtained by the 
notification obtaining process is perfbmned by the computer. 

19. (Original) The recording medium according to claim 15, wherein the 
countermeasure implemented by the unauthorized access countermeasure 
implementation control process is cancelled after the unauthorized access is not 
detected any more and a preset time passes. 

20. (Currently amended) The recording medium according to claim 19, wherein the 
preset time is set based on the security policy on the network operation of both the 
user's communication network and the service-disclosed etto^ommunication network. 
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21. (Currently amended) The recording medium according to claim 20, wherein 
when the times set between the user's communication network and the service: 
disclosed e thef^communication network based on the security policy on the network 
operation of both networks differ between both networks, the countermeasure is 
cancelled after the unauthorized access is not detected any more and a shorter time of 
the two passes. 

22. (Currently amended) The recording medium according to claim 2, wherein by 
having the program executed by th e computer: computer: 

the process of obtaining a notification of the determination that unauthorized 
access to the services disclosed from a service-disclosed c ommunication network 
different from the user's communication network is made to flow into said service- 
disclosed ethepcommunication network is performed by the computer; 

the process of searching the fiowing-in path of the unauthorized access related 
to the notification in the user's communication network when the notification is 
obtained by the notification obtaining process is performed by the computer; 

the process of determining the place to implement the countermeasure for 
protecting the services disclosed from said service-disclosed e fehet^ommunication 
network from the unauthorized access related to the notification based on the result of 
the search when the notification is obtained by the notification obtaining process is 
performed by the computer; and 

the process of notifying, according to a determination that the countermeasure is 
implemented In the other communication networks f low sourco that makes the 
unauthorized access related to the notification flow into the user's communication 
network when the notification is obtained by the notification obtaining process, the 
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determination to tine other communication networks f l ow aourcQ is performed by the 
computer. 

23. (Currently amended) The recording medium according to claim 22, wherein by 
having the program executed by the eemputor; computer: 

the unauthorized access countermeasure Implementation control process that 
has the countermeasure for protecting the services disclosed from the user's 
communication network or the service-disclosed o thet^communicatlon network from the 
unauthorized access related to the notification implemented in the communication 
network of the notification source of the notification when the notification obtained by 
said notification obtaining process is the same as that obtained in the past is further 
performed by the computer. 

24. (Original) The recording medium according to claim 23, wherein the process of 
notifying the information that uniquely identifies the unauthorized access related to the 
notification when the detemiination is notified Is performed by the computer. 

25. (Currently Amended) TTie recording medium according to claim 2, wherein by 
having the program executed by the computer; computer: 

the process of recording the history of the notification is further performed by 
the computer. 

26. (Currently amended) An unauthorized access prevention method performed by 
an unauthorized access prevention system which resides within a user's communication 
network, including: 
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searching the flowing-in path of unauthorized access transmitted from a 
transmitter to services disclosed from a customer site to other communication networks 
adjacent to the user's communication network via the user's communication network; 

determining a plurality of countermeasure Implementation planning pteee places 
from among a plurality of places, which include the other communication networks. 
edge routers of the user's communication network each of whi ch Is arranged on each 
border of the other communication networks, and POP (point of presence) edge routers 
within the user' s communicatlQn network, the plurality of plages l?elnq for protecting the 
services from the unauthorized access based on a result of the search; and 

notifying at least one or more notified parties, which Include other unauthorized 
access prevention systems each of which resides within the other communication 
networks, the edge routers of the user's communication network, and the POP edge 
routers withi n the user's communication network, only a flow Q ourcc that is one of the 
other communication — n e tworks of the dctGrminatlon — of the countermeasure 
Implementation planning pfae eplaces. when it is determined that the notified parties are 
the dGtcrm i notion — un i t dGtcrmincs the flow Gourcc q g the countermeasure 
Implementation planning places for a reason that the unauthorized access was flowed 
Into the user's communication network. network, wherein: 

the notifying notifies the other unauthorized access prevention systems of the 
determination when it is determined that the other communication networks are the 
countermeasure implementation planning places, and 

the notifying notifies the edge routers or the POP edge routers of the 
determination that the other communication networks do not have a reliable 
relationship with the users' communication network even if it Is determined that the 
other communication networks are the countermeasure Implementation planning places. 

27. (Cancelled) 
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